GitHub Security Advisories
Open-source package ecosystem coverage across npm / PyPI / Maven / Go / RubyGems and more.
68,775 advisories tracked · showing 100
- Nov 2, 2026GHSA-8mx3-8wfv-5gj9unknownCVE-2026-20591
In GPU pdma, there is a possible escalation of privilege due to a missing permission check. This...
- Nov 2, 2026GHSA-9h6h-53q2-j22hunknownCVE-2026-20596
In Modem, there is a possible out of bounds read due to improper input validation. This could...
- Nov 2, 2026GHSA-hwwj-c42r-c63gunknownCVE-2026-68588
In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow. This could lead...
- Nov 2, 2026GHSA-v828-j22x-jhc8unknownCVE-2026-20598
In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to...
- Nov 2, 2026GHSA-697p-vj53-4q53unknownCVE-2026-68589
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-fxcx-w8fx-4xxhunknownCVE-2026-68591
In Modem, there is a possible escalation of privilege due to a permissions bypass. This could...
- Nov 2, 2026GHSA-3gr6-wpqr-g6x5unknownCVE-2026-20597
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-qxrg-87m2-73qxunknownCVE-2026-20600
In Modem, there is a possible application crash due to a logic error. This could lead to remote...
- Nov 2, 2026GHSA-236q-w8hv-6fmvunknownCVE-2026-20599
In Modem, there is a possible escalation of privilege due to a missing permission check. This...
- Nov 2, 2026GHSA-vmxx-jr8q-5f47unknownCVE-2026-68590
In ip_stack, there is a possible out of bounds read due to improper input validation. This could...
- Nov 2, 2026GHSA-cvpv-9h9f-xr2vunknownCVE-2026-20574
In afe, there is a possible memory corruption due to use after free. This could lead to local...
- Nov 2, 2026GHSA-h965-xm4j-35wrunknownCVE-2026-20567
In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to...
- Nov 2, 2026GHSA-9mrg-c8wx-5r96unknownCVE-2026-20564
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could...
- Nov 2, 2026GHSA-r68q-g3qm-fh38unknownCVE-2026-20582
In usb, there is a possible memory corruption due to double free. This could lead to local...
- Nov 2, 2026GHSA-mwx2-c739-f5qgunknownCVE-2026-20565
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could...
- Nov 2, 2026GHSA-pfwh-fvqc-x9rxunknownCVE-2026-20568
In afe, there is a possible system crash due to use after free. This could lead to local...
- Nov 2, 2026GHSA-6jq7-c48f-538qunknownCVE-2026-20569
In adsp, there is a possible memory corruption due to use after free. This could lead to local...
- Nov 2, 2026GHSA-w4fh-mpfm-65wpunknownCVE-2026-20570
In adsp, there is a possible escalation of privilege due to use after free. This could lead to...
- Nov 2, 2026GHSA-j3f6-5f83-fq6junknownCVE-2026-20562
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-rp6f-696m-rpqwunknownCVE-2026-20566
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-q6vx-jxmh-c2fmunknownCVE-2026-20571
In afe, there is a possible memory corruption due to use after free. This could lead to local...
- Nov 2, 2026GHSA-qjpg-6w43-8mqvunknownCVE-2026-20575
In afe, there is a possible memory corruption due to use after free. This could lead to local...
- Nov 2, 2026GHSA-x23c-cphv-jx26unknownCVE-2026-20595
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could...
- Nov 2, 2026GHSA-25v4-hmmx-33jxunknownCVE-2026-20572
In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to...
- Nov 2, 2026GHSA-w57x-82vr-w96munknownCVE-2026-20573
In afe, there is a possible memory corruption due to double free. This could lead to local...
- Nov 2, 2026GHSA-j82q-4x2p-mxp4unknownCVE-2026-20580
In usb, there is a possible system crash due to use after free. This could lead to local denial...
- Nov 2, 2026GHSA-w4x9-4mfp-qpx8unknownCVE-2026-20563
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could...
- Nov 2, 2026GHSA-6w47-4m5p-957cunknownCVE-2026-20578
In Modem, there is a possible information disclosure due to side channel information disclosure....
- Nov 2, 2026GHSA-mg7h-vxgw-9p69unknownCVE-2026-20590
In display, there is a possible system crash due to a logic error. This could lead to local...
- Nov 2, 2026GHSA-4qcx-99jw-5fpfunknownCVE-2026-20576
In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to...
- Nov 2, 2026GHSA-fmr9-9m5w-7cgxunknownCVE-2026-20594
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-wxfx-9v42-f7mwunknownCVE-2026-20584
In usb, there is a possible memory corruption due to a missing bounds check. This could lead to...
- Nov 2, 2026GHSA-q62f-x5mv-729funknownCVE-2026-20577
In Modem, there is a possible permission bypass due to a permissions bypass. This could lead to...
- Nov 2, 2026GHSA-vfpx-hmr8-rvqfunknownCVE-2026-20583
In usb, there is a possible system crash due to use after free. This could lead to local denial...
- Nov 2, 2026GHSA-rxxm-cp7w-473wunknownCVE-2026-20581
In usb, there is a possible memory corruption due to use after free. This could lead to local...
- Nov 2, 2026GHSA-m5wr-h942-3686unknownCVE-2026-20585
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-28mr-wv5j-pmwfunknownCVE-2026-20592
In Modem, there is a possible information disclosure due to side channel information disclosure....
- Nov 2, 2026GHSA-r29v-94c8-p62funknownCVE-2026-20593
In Modem, there is a possible application crash due to improper input validation. This could lead...
- Nov 2, 2026GHSA-vmq3-mf6c-g3rvunknownCVE-2026-20549
In Modem, there is a possible out of bounds write due to improper input validation. This could...
- Nov 2, 2026GHSA-6fv9-h48r-757vunknownCVE-2026-20550
In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-7jqx-wgvj-w3fpunknownCVE-2026-20558
In GPU pdma, there is a possible escalation of privilege due to use after free. This could lead...
- Nov 2, 2026GHSA-cp6g-v885-6wxwunknownCVE-2026-20548
In Modem, there is a possible out of bounds write due to an integer overflow. This could lead to...
- Nov 2, 2026GHSA-g855-xv99-m475unknownCVE-2026-20554
In Modem, there is a possible system crash due to a missing bounds check. This could lead to...
- Nov 2, 2026GHSA-pxpq-8vf2-jpqjunknownCVE-2026-20547
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-c3gw-w6rf-6hj6unknownCVE-2026-20551
In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-qcf3-g6w9-4666unknownCVE-2026-20553
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to...
- Nov 2, 2026GHSA-mjqg-35qw-pc3junknownCVE-2026-20552
In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-f3f6-67rr-rmf6unknownCVE-2026-20557
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-72vh-46x2-wwjjunknownCVE-2026-20556
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-v969-7g96-8fwwunknownCVE-2026-20555
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-v8m5-cqwh-45ggunknownCVE-2026-20559
In GPU pdma, there is a possible memory corruption due to use after free. This could lead to...
- Nov 2, 2026GHSA-wxhg-p53w-6r2vunknownCVE-2026-20560
In Modem, there is a possible system crash due to improper input validation. This could lead to...
- Nov 2, 2026GHSA-mgh5-hj74-6ppmunknownCVE-2026-20561
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-936x-hc9q-g66vunknownCVE-2026-20545
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-p764-mm73-mpf6LowCVSS 4.8CVE-2026-120335
A vulnerability has been found in deepset-ai farm up to 0.8.0. Affected is the function...
- Nov 2, 2026GHSA-gv3h-7jmh-m254LowCVSS 4.3CVE-2026-120334
A flaw has been found in deepset-ai farm up to 0.8.0. This impacts the function...
- Nov 2, 2026GHSA-vcmw-h6fx-69rrunknownCVE-2026-20499
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...
- Nov 2, 2026GHSA-4fv4-hjv3-48c7unknownCVE-2026-20546
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could...
- Nov 2, 2026GHSA-34ff-jfmp-74pgMediumCVSS 8.3CVE-2026-120324
A weakness has been identified in Aklivity Zilla up to 1.3.4/2.4.7/2.5.0-rc2. The affected...
- Nov 2, 2026GHSA-f9qv-qgvr-6jvvLowCVSS 6.3CVE-2026-120325
A security vulnerability has been detected in Webpro-nl Knip up to 6.44.0. The impacted element...
- Nov 2, 2026GHSA-65gw-vqgg-jvcfHighCVSS 5.9CVE-2026-120317
http4k from 4.9.10.0 before 6.60.0.0 contains a missing integrity check vulnerability because...
- Nov 2, 2026GHSA-jw39-vgr6-2fx4HighCVSS 7.5CVE-2026-120313
Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath()...
- Nov 2, 2026GHSA-7925-2fm7-xg83HighCVSS 8.8CVE-2026-120315
LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability that allows...
- Nov 2, 2026GHSA-c48q-fjwh-j7ggMediumCVSS 4.3CVE-2026-120323
A security flaw has been discovered in samanhappy MCPHub up to 1.0.45/1.1.7. Impacted is an...
- Nov 2, 2026GHSA-r83g-mhw3-hx4pHighCVSS 5.9CVE-2026-120316
http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching...
- Nov 2, 2026GHSA-5c2w-7m65-p4gfHighCVSS 8.8CVE-2026-120312
Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that...
- Nov 2, 2026GHSA-vw9p-p26h-v56vMediumCVSS 7.3CVE-2026-120314
Network-AI from 5.14.0 before 5.15.5 contains a missing authentication vulnerability in the...
- Nov 2, 2026GHSA-px4x-x79p-cjfvLowCVSS 3.1CVE-2026-120310
Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 returns stored field values in object...
- Nov 2, 2026GHSA-3686-mhhg-fr97HighCVSS 8.8CVE-2026-120311
Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in FileJobStore that...
- Nov 2, 2026GHSA-49pf-hq35-qwjqHighCVSS 9.9CVE-2026-120322
A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown...
- Nov 2, 2026GHSA-x3j2-x298-hcr4CriticalCVSS 10.0CVE-2026-120279
A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function...
- Nov 2, 2026GHSA-q3mh-mrr2-xh2hCriticalCVSS 10.0CVE-2026-120280
A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the...
- Nov 2, 2026GHSA-rg96-pw5p-hj64CriticalCVSS 10.0CVE-2026-120281
A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the...
- Nov 2, 2026GHSA-8gr5-327m-w3jxLowCVSS 4.7CVE-2026-120320
A vulnerability was determined in jxxghp MoviePilot up to 3.1.2. This vulnerability affects the...
- Nov 2, 2026GHSA-r8g5-gwcc-5r5rMediumCVSS 3.7CVE-2026-120309
Nuxt from 4.6.0 before 4.6.2 contains a route parameter confusion vulnerability in getRouterParam...
- Nov 2, 2026GHSA-q5j7-qf5p-p6hvCriticalCVSS 10.0CVE-2026-120283
A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of...
- Nov 2, 2026GHSA-2xhq-9mxg-mc67LowCVSS 6.3CVE-2026-120319
A vulnerability was found in Sanluan PublicCMS 4.x/5.x/6.x. This affects the function...
- Nov 2, 2026GHSA-7888-qfjf-w47rHighCVSS 9.9CVE-2026-120282
A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function...
- Nov 2, 2026GHSA-c66q-rm6m-7cvqHighCVE-2026-84231
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket...
- Nov 2, 2026GHSA-v6ff-2mqg-mg4gMediumCVSS 5.3CVE-2026-120278
A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impacted is the function...
- Nov 2, 2026GHSA-f4x7-9w8x-8x82HighCVE-2026-95863
Improper neutralization of input during web page generation in Apache Wicket. Apache Wicket...
- Nov 2, 2026GHSA-58xq-c93x-4pwmLowCVE-2026-87718
Apache Wicket 10.10.0, 10.11.0 and 9.24.0 do not set the Content-Security-Policy headers on a...
- Nov 2, 2026GHSA-jxgh-x37p-hq3vCriticalCVSS 10.0CVE-2026-120276
A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects...
- Nov 2, 2026GHSA-f5q6-27px-wgxfCriticalCVSS 10.0CVE-2026-120277
A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue...
- Nov 2, 2026GHSA-f448-r48f-qjchHighCVE-2026-83539
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket...
- Nov 2, 2026GHSA-7jw6-8mj7-6rq2MediumCVE-2026-84177
Incorrect behavior order in Apache Wicket: a file path is validated before the framework appends...
- Nov 2, 2026GHSA-p8vc-6wf8-q86xMediumCVSS 5.5CVE-2026-120275
A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This...
- Nov 2, 2026GHSA-8xp3-3x4j-prp2HighCVE-2026-111089
Apache Wicket reads texts from the application's resource bundles — a localized label, a css...
- Nov 2, 2026GHSA-f8h3-wpxx-57r3HighCVE-2026-83559
Improper encoding or escaping of output in Apache Wicket. org.apache.wicket.core.util.string...
- Nov 2, 2026GHSA-3hjq-2xr3-p7pxMediumCVE-2026-84172
Files accessible to external parties in Apache Wicket. org.apache.wicket.markup.html...
- Nov 2, 2026GHSA-w478-29fp-9q59HighCVE-2026-84170
Allocation of resources without limits or throttling in Apache Wicket. org.apache.wicket.markup...
- Nov 2, 2026GHSA-cvcm-96v9-xgwmHighCVE-2026-82956
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket...
- Nov 2, 2026GHSA-7x2v-qvvr-3xhgHighCVE-2026-83594
Memory allocation with an excessive size value in Apache Wicket. org.apache.wicket.markup.html...
- Nov 2, 2026GHSA-5h36-fqxx-fjphLowCVE-2026-82559
Insufficient session expiration in Apache Wicket. org.apache.wicket.protocol.ws...
- Nov 2, 2026GHSA-c8q4-2mh6-cqxpMediumCVE-2026-82705
Missing authorization in Apache Wicket. org.apache.wicket.authorization.IAuthorizationStrategy...
- Nov 2, 2026GHSA-4f8f-rp3w-cwx9LowCVE-2026-82898
Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol.http...
- Nov 2, 2026GHSA-qqf3-jqrg-fm5rHighCVE-2026-82840
Session fixation in Apache Wicket. org.apache.wicket.authroles.authentication...
- Nov 2, 2026GHSA-vprr-p32v-2q45MediumCVE-2026-82557
Missing authorization in Apache Wicket. org.apache.wicket.markup.html.form.Form resolves the...
- Nov 2, 2026GHSA-fcp8-rfgx-8mhmMediumCVE-2026-82115
Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api...
- Nov 2, 2026GHSA-r953-8335-p3v2LowCVE-2026-82558
Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSocketBehavior,...